This Privacy Policy explains how Primary Care Training Services (“we”, “us”, “our”) collects, uses and protects your personal data when you visit pctservices.co.uk and book our training courses. We are the “data controller” for the personal data described in this policy.

Who we are

Primary Care Training Services, First Floor, 2 Queen Street, Northwich, Cheshire, CW9 5JL. Email: admin@primarycaretrainingservices.co.uk. Phone: 07958 915146

If you have any questions about this policy or how we handle your data, please contact us using the details above.

Information we collect

Information you provide

Your name, email address and phone number
Your organisation or employer, where relevant
Booking details, such as the course, date and attendee information
Payment details, which are processed securely by Stripe — we never see or store your full card number
Any information you include in an enquiry or contact form
Account details (your email address) if you create an account to manage bookings

Information collected automatically

When you use our site we collect limited technical information (such as your approximate region and device type) through anonymous analytics, together with short-lived security data used to protect our forms and your account. This is explained in the next section.

Cookies and analytics

Strictly necessary cookies (no consent required)

We use a small number of essential cookies that are required for the website to work — for example, to keep you signed in, to process a booking, and to protect our forms from spam and abuse using Cloudflare Turnstile. These do not require consent because the site cannot function without them.

Anonymous analytics (no consent required)

We use privacy-friendly, fully anonymous analytics (OpenPanel) to understand how our site is used. It does not use cookies, does not collect personal data, and does not track you across websites — it only produces aggregate, anonymised statistics. Because no personal data is processed, this does not require your consent under UK data protection and PECR rules.

Google Tag Manager (optional — consent required)

The only consent we ask for is to load Google Tag Manager, which we use for advertising and marketing measurement (such as Google Ads). Google Tag Manager and any marketing tags it controls load only if you accept via our cookie banner. We use Google Consent Mode v2, which keeps advertising and analytics storage denied by default until you give consent. You can change or withdraw your choice at any time.

How we use your information

To provide our training courses and manage your bookings
To take payment and issue receipts and certificates
To send you booking confirmations and essential service messages
To respond to your enquiries
To meet our legal and regulatory obligations
To keep our website secure and to improve it using anonymous analytics
For advertising and marketing, only where you have given consent

Legal bases for processing

Under UK GDPR we rely on the following legal bases:

Contract: to take and fulfil your course bookings.
Legitimate interests: to run and secure our business and to understand site usage through anonymous analytics.
Consent: for advertising and marketing via Google Tag Manager.
Legal obligation: to keep financial and other records required by law.

Who we share your information with

We use trusted service providers who process data on our behalf, including: Stripe (payments), Supabase (secure database, accounts and file storage), Vercel (website hosting), Sanity (website content), Cloudflare (security and bot protection), OpenPanel (anonymous analytics) and Google (advertising and marketing, only with your consent). We do not sell your personal data.

International data transfers

Some of our providers are based outside the UK. Where personal data is transferred internationally, we rely on appropriate safeguards such as UK adequacy regulations or standard contractual clauses.

How long we keep your data

We keep personal data only for as long as necessary. Booking and payment records are retained for the period required by tax and accounting law (generally six years). Account information is kept while your account remains active, and enquiry messages are kept for a reasonable period before deletion.

Your rights

Under UK data protection law you have the right to access, correct, delete, restrict or object to our use of your personal data, the right to data portability, and the right to withdraw consent at any time. To exercise any of these rights, please contact us using the details above.

Data security

We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls and reputable infrastructure providers. No method of transmission over the internet is completely secure, but we take reasonable steps to safeguard your information.

Children

Our courses and bookings are intended for adults and professionals. We do not knowingly collect personal data from children.

Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last updated.

Contact us

Primary Care Training Services, First Floor, 2 Queen Street, Northwich, Cheshire, CW9 5JL. Email: admin@primarycaretrainingservices.co.uk. Phone: 07958 915146.